2016-11-23 17:43:43 |
Denis Klepikov |
bug |
|
|
added bug |
2016-11-23 17:44:03 |
Denis Klepikov |
fuel: assignee |
|
Fuel for Openstack (fuel) |
|
2016-11-23 17:44:25 |
Denis Klepikov |
fuel: milestone |
|
9.2 |
|
2016-11-23 17:44:31 |
Denis Klepikov |
fuel: importance |
Undecided |
High |
|
2016-11-23 17:46:38 |
Denis Klepikov |
description |
Environment:
- MOS 9.0
- Ubuntu
Security limits are configured:
cat /etc/security/limits.conf
root@node-5:~# cat /etc/security/limits.conf
# /etc/security/limits.conf
#
#Each line describes a limit for a user in the form:
#
#<domain> <type> <item> <value>
#
#Where:
#<domain> can be:
# - a user name
# - a group name, with @group syntax
# - the wildcard *, for default entry
# - the wildcard %, can be also used with %group syntax,
# for maxlogin limit
# - NOTE: group and wildcard limits are not applied to root.
# To apply a limit to the root user, <domain> must be
# the literal username root.
#
#<type> can have the two values:
# - "soft" for enforcing the soft limits
# - "hard" for enforcing hard limits
#
#<item> can be one of the following:
# - core - limits the core file size (KB)
# - data - max data size (KB)
# - fsize - maximum filesize (KB)
# - memlock - max locked-in-memory address space (KB)
# - nofile - max number of open files
# - rss - max resident set size (KB)
# - stack - max stack size (KB)
# - cpu - max CPU time (MIN)
# - nproc - max number of processes
# - as - address space limit (KB)
# - maxlogins - max number of logins for this user
# - maxsyslogins - max number of logins on the system
# - priority - the priority to run user process with
# - locks - max number of file locks the user can hold
# - sigpending - max number of pending signals
# - msgqueue - max memory used by POSIX message queues (bytes)
# - nice - max nice priority allowed to raise to values: [-20, 19]
# - rtprio - max realtime priority
# - chroot - change root to directory (Debian-specific)
#
#<domain> <type> <item> <value>
#
#* soft core 0
#root hard core 100000
#* hard rss 10000
#@student hard nproc 20
#@faculty soft nproc 20
#@faculty hard nproc 50
#ftp hard nproc 0
#ftp - chroot /ftp
#@student - maxlogins 4
# End of file
but https://github.com/openstack/fuel-library/commit/65eca547606edceedc15d8fadfd1e5822ba9f1f6
~# hiera roles
["ceph-osd", "compute"]
root@node-5:~# whoami
root
root@node-5:~# ulimit -n
1024
Related bug: https://bugs.launchpad.net/fuel/+bug/1429553 |
Environment:
- MOS 9.0
- Ubuntu
Security limits are not configured:
root@node-5:~# cat /etc/security/limits.conf
# /etc/security/limits.conf
#
#Each line describes a limit for a user in the form:
#
#<domain> <type> <item> <value>
#
#Where:
#<domain> can be:
# - a user name
# - a group name, with @group syntax
# - the wildcard *, for default entry
# - the wildcard %, can be also used with %group syntax,
# for maxlogin limit
# - NOTE: group and wildcard limits are not applied to root.
# To apply a limit to the root user, <domain> must be
# the literal username root.
#
#<type> can have the two values:
# - "soft" for enforcing the soft limits
# - "hard" for enforcing hard limits
#
#<item> can be one of the following:
# - core - limits the core file size (KB)
# - data - max data size (KB)
# - fsize - maximum filesize (KB)
# - memlock - max locked-in-memory address space (KB)
# - nofile - max number of open files
# - rss - max resident set size (KB)
# - stack - max stack size (KB)
# - cpu - max CPU time (MIN)
# - nproc - max number of processes
# - as - address space limit (KB)
# - maxlogins - max number of logins for this user
# - maxsyslogins - max number of logins on the system
# - priority - the priority to run user process with
# - locks - max number of file locks the user can hold
# - sigpending - max number of pending signals
# - msgqueue - max memory used by POSIX message queues (bytes)
# - nice - max nice priority allowed to raise to values: [-20, 19]
# - rtprio - max realtime priority
# - chroot - change root to directory (Debian-specific)
#
#<domain> <type> <item> <value>
#
#* soft core 0
#root hard core 100000
#* hard rss 10000
#@student hard nproc 20
#@faculty soft nproc 20
#@faculty hard nproc 50
#ftp hard nproc 0
#ftp - chroot /ftp
#@student - maxlogins 4
# End of file
but https://github.com/openstack/fuel-library/commit/65eca547606edceedc15d8fadfd1e5822ba9f1f6
~# hiera roles
["ceph-osd", "compute"]
root@node-5:~# whoami
root
root@node-5:~# ulimit -n
1024
Related bug: https://bugs.launchpad.net/fuel/+bug/1429553 |
|
2016-11-23 17:46:50 |
Denis Klepikov |
summary |
Linux security limits are not applied |
Linux security limits are not configured |
|
2016-11-23 17:46:57 |
Andrii Petrenko |
bug |
|
|
added subscriber Andrii Petrenko |
2016-11-23 19:03:17 |
Alexander Bozhenko |
bug |
|
|
added subscriber Alexander Bozhenko |
2016-11-24 05:23:01 |
Roman Rufanov |
tags |
support |
customer-found support |
|
2016-11-24 07:52:24 |
Roman Rufanov |
fuel: status |
New |
Confirmed |
|
2016-11-24 11:13:24 |
Denis Klepikov |
nominated for series |
|
fuel/6.0.x |
|
2016-11-24 11:13:24 |
Denis Klepikov |
bug task added |
|
fuel/6.0.x |
|
2016-11-24 11:13:24 |
Denis Klepikov |
nominated for series |
|
fuel/8.0.x |
|
2016-11-24 11:13:24 |
Denis Klepikov |
bug task added |
|
fuel/8.0.x |
|
2016-11-24 11:13:24 |
Denis Klepikov |
nominated for series |
|
fuel/6.1.x |
|
2016-11-24 11:13:24 |
Denis Klepikov |
bug task added |
|
fuel/6.1.x |
|
2016-11-24 11:13:24 |
Denis Klepikov |
nominated for series |
|
fuel/7.0.x |
|
2016-11-24 11:13:24 |
Denis Klepikov |
bug task added |
|
fuel/7.0.x |
|
2016-11-24 11:33:41 |
Oleksiy Molchanov |
fuel: assignee |
Fuel for Openstack (fuel) |
Fuel Sustaining (fuel-sustaining-team) |
|
2016-11-24 11:33:50 |
Oleksiy Molchanov |
nominated for series |
|
fuel/mitaka |
|
2016-11-24 11:33:50 |
Oleksiy Molchanov |
bug task added |
|
fuel/mitaka |
|
2016-11-24 11:33:50 |
Oleksiy Molchanov |
nominated for series |
|
fuel/ocata |
|
2016-11-24 11:33:50 |
Oleksiy Molchanov |
nominated for series |
|
fuel/newton |
|
2016-11-24 11:33:50 |
Oleksiy Molchanov |
bug task added |
|
fuel/newton |
|
2016-11-24 11:33:59 |
Oleksiy Molchanov |
fuel: milestone |
9.2 |
11.0 |
|
2016-11-24 11:34:05 |
Oleksiy Molchanov |
fuel/6.0.x: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
2016-11-24 11:34:10 |
Oleksiy Molchanov |
fuel/6.1.x: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
2016-11-24 11:34:14 |
Oleksiy Molchanov |
fuel/7.0.x: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
2016-11-24 11:34:18 |
Oleksiy Molchanov |
fuel/8.0.x: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
2016-11-24 11:34:21 |
Oleksiy Molchanov |
fuel/mitaka: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
2016-11-24 11:34:25 |
Oleksiy Molchanov |
fuel/newton: assignee |
|
Fuel Sustaining (fuel-sustaining-team) |
|
2016-11-24 11:34:28 |
Oleksiy Molchanov |
fuel/6.0.x: importance |
Undecided |
High |
|
2016-11-24 11:34:45 |
Oleksiy Molchanov |
fuel/8.0.x: importance |
Undecided |
High |
|
2016-11-24 13:50:37 |
Oleksiy Molchanov |
fuel/6.1.x: importance |
Undecided |
High |
|
2016-11-24 13:50:40 |
Oleksiy Molchanov |
fuel/mitaka: importance |
Undecided |
High |
|
2016-11-24 13:50:43 |
Oleksiy Molchanov |
fuel/7.0.x: importance |
Undecided |
High |
|
2016-11-24 13:50:44 |
Oleksiy Molchanov |
fuel/newton: importance |
Undecided |
High |
|
2016-11-24 13:50:46 |
Oleksiy Molchanov |
fuel/mitaka: status |
New |
Confirmed |
|
2016-11-24 13:50:52 |
Oleksiy Molchanov |
fuel/6.0.x: status |
New |
Confirmed |
|
2016-11-24 13:51:00 |
Oleksiy Molchanov |
fuel/7.0.x: status |
New |
Confirmed |
|
2016-11-24 13:51:04 |
Oleksiy Molchanov |
fuel/6.1.x: status |
New |
Confirmed |
|
2016-11-24 13:52:38 |
Oleksiy Molchanov |
fuel/8.0.x: status |
New |
Confirmed |
|
2016-11-24 13:52:40 |
Oleksiy Molchanov |
fuel/newton: status |
New |
Confirmed |
|
2016-11-24 13:52:57 |
Oleksiy Molchanov |
fuel/6.0.x: milestone |
|
6.0-updates |
|
2016-11-24 13:52:59 |
Oleksiy Molchanov |
fuel/6.1.x: milestone |
|
6.1-updates |
|
2016-11-24 13:53:02 |
Oleksiy Molchanov |
fuel/7.0.x: milestone |
|
7.0-updates |
|
2016-11-24 13:53:04 |
Oleksiy Molchanov |
fuel/8.0.x: milestone |
|
8.0-updates |
|
2016-11-24 13:53:06 |
Oleksiy Molchanov |
fuel/mitaka: milestone |
|
9.2 |
|
2016-11-24 13:53:09 |
Oleksiy Molchanov |
fuel/newton: milestone |
|
10.0-updates |
|
2016-11-24 14:34:47 |
Oleksiy Molchanov |
fuel: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Oleksiy Molchanov (omolchanov) |
|
2016-11-28 10:30:46 |
Oleksiy Molchanov |
fuel: assignee |
Oleksiy Molchanov (omolchanov) |
Fuel Sustaining (fuel-sustaining-team) |
|
2016-11-29 12:21:07 |
Oleksiy Molchanov |
fuel: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Oleksiy Molchanov (omolchanov) |
|
2016-11-29 16:29:49 |
Oleksiy Molchanov |
fuel: status |
Confirmed |
In Progress |
|
2016-12-01 12:57:12 |
OpenStack Infra |
fuel/mitaka: status |
Confirmed |
In Progress |
|
2016-12-01 12:57:12 |
OpenStack Infra |
fuel/mitaka: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Oleksiy Molchanov (omolchanov) |
|
2016-12-12 11:19:46 |
OpenStack Infra |
fuel/newton: status |
Confirmed |
In Progress |
|
2016-12-12 11:19:46 |
OpenStack Infra |
fuel/newton: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Oleksiy Molchanov (omolchanov) |
|
2016-12-14 09:00:00 |
OpenStack Infra |
fuel: status |
In Progress |
Fix Committed |
|
2016-12-14 09:01:58 |
OpenStack Infra |
fuel/newton: status |
In Progress |
Fix Committed |
|
2016-12-14 09:02:48 |
OpenStack Infra |
fuel/mitaka: status |
In Progress |
Fix Committed |
|
2017-01-25 15:00:50 |
Ekaterina Shutova |
tags |
customer-found support |
customer-found on-verification support |
|
2017-01-25 16:49:54 |
Ekaterina Shutova |
fuel/mitaka: status |
Fix Committed |
Confirmed |
|
2017-01-26 13:30:04 |
Oleksiy Molchanov |
fuel/mitaka: status |
Confirmed |
Fix Committed |
|
2017-01-30 09:34:21 |
Ekaterina Shutova |
fuel/mitaka: status |
Fix Committed |
Confirmed |
|
2017-03-13 12:57:01 |
Oleksiy Molchanov |
fuel/mitaka: status |
Confirmed |
Fix Committed |
|
2017-03-14 16:04:10 |
Alexey Stupnikov |
fuel/6.0.x: status |
Confirmed |
Won't Fix |
|
2017-03-14 16:04:14 |
Alexey Stupnikov |
fuel/6.1.x: status |
Confirmed |
Won't Fix |
|
2017-03-14 16:04:19 |
Alexey Stupnikov |
fuel/7.0.x: status |
Confirmed |
Won't Fix |
|
2017-03-14 16:04:25 |
Alexey Stupnikov |
fuel/6.0.x: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Alexey Stupnikov (astupnikov) |
|
2017-03-14 16:04:28 |
Alexey Stupnikov |
fuel/7.0.x: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Alexey Stupnikov (astupnikov) |
|
2017-03-14 16:04:30 |
Alexey Stupnikov |
fuel/6.1.x: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Alexey Stupnikov (astupnikov) |
|
2017-03-14 16:04:34 |
Alexey Stupnikov |
fuel/8.0.x: assignee |
Fuel Sustaining (fuel-sustaining-team) |
Alexey Stupnikov (astupnikov) |
|
2017-03-17 17:21:40 |
Alexey Stupnikov |
fuel/8.0.x: status |
Confirmed |
Won't Fix |
|
2017-04-14 09:18:53 |
Ilya Bumarskov |
fuel/newton: status |
Fix Committed |
Confirmed |
|
2017-04-14 09:19:07 |
Ilya Bumarskov |
tags |
customer-found on-verification support |
customer-found support |
|
2018-06-03 17:45:17 |
Oleksiy Molchanov |
fuel/newton: status |
Confirmed |
Won't Fix |
|